786be06a883141316c778f9fdab96ad62993e460418ec88a22f7b356297cdf5a

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/09/2026, 14:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_786be06a883141316c778f9fdab96ad62993e460418ec88a22f7b356297cdf5a.html
Size 3KB
Sample260912-sbm7msdd79
SHA256 786be06a883141316c778f9fdab96ad62993e460418ec88a22f7b356297cdf5a
MD5 5eadc9d3c8998423b8c2b2a06eb57b79
SHA1 4ad09d0c38ebc0fb2a945e8dedda3c1b5f1af493
SHA512 e1ddb95c9052d68f830e1888eed9db723ae82726c169ac7acd7cb88031256029e6005b80e1cd7dbf8933855f095da70f75474b867fec27956543aff4978a2d73
TLSH
T19A7191C77E79CAF083254E7202AEB93DD6D0A653E922DBD0B4F4C46BAD60A04112D31A
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3592	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134338346699354335"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{C72989CC-37FE-462E-9429-C63489CC387F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2136	msedge.exe
2136	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 3316	4936	msedge.exe	87
PID 4936 wrote to memory of 3592	4936	msedge.exe	90
PID 4936 wrote to memory of 2172	4936	msedge.exe	91
PID 4936 wrote to memory of 2172	4936	msedge.exe	91
PID 4936 wrote to memory of 2172	4936	msedge.exe	91
PID 4936 wrote to memory of 1852	4936	msedge.exe	92
PID 4936 wrote to memory of 1852	4936	msedge.exe	92
PID 4936 wrote to memory of 756	4936	msedge.exe	93
PID 4936 wrote to memory of 756	4936	msedge.exe	93
PID 4936 wrote to memory of 756	4936	msedge.exe	93
PID 4936 wrote to memory of 4800	4936	msedge.exe	94
PID 4936 wrote to memory of 4800	4936	msedge.exe	94
PID 4936 wrote to memory of 4800	4936	msedge.exe	94
PID 4936 wrote to memory of 5096	4936	msedge.exe	95
PID 4936 wrote to memory of 2496	4936	msedge.exe	96
PID 4936 wrote to memory of 5096	4936	msedge.exe	95
PID 4936 wrote to memory of 5096	4936	msedge.exe	95
PID 4936 wrote to memory of 2496	4936	msedge.exe	96
PID 4936 wrote to memory of 2496	4936	msedge.exe	96
PID 4936 wrote to memory of 412	4936	msedge.exe	97
PID 4936 wrote to memory of 412	4936	msedge.exe	97
PID 4936 wrote to memory of 412	4936	msedge.exe	97
PID 4936 wrote to memory of 3372	4936	msedge.exe	100
PID 4936 wrote to memory of 3372	4936	msedge.exe	100
PID 4936 wrote to memory of 2160	4936	msedge.exe	101
PID 4936 wrote to memory of 2160	4936	msedge.exe	101
PID 4936 wrote to memory of 732	4936	msedge.exe	103
PID 4936 wrote to memory of 552	4936	msedge.exe	108
PID 4936 wrote to memory of 4060	4936	msedge.exe	109
PID 4936 wrote to memory of 2264	4936	msedge.exe	110
PID 4936 wrote to memory of 4692	4936	msedge.exe	112
PID 4936 wrote to memory of 4692	4936	msedge.exe	112
PID 4936 wrote to memory of 2136	4936	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\jaffacakes118_786be06a883141316c778f9fdab96ad62993e460418ec88a22f7b356297cdf5a.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x210,0x260,0x7ffc0dd6c188,0x7ffc0dd6c194,0x7ffc0dd6c1a0
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,4037709886965921646,12815653809239212305,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=2852 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1796,i,330466363345099209,18110988408564285567,262144 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=2692 /prefetch:2
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,9488992203265425515,15096414986588333787,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,2892336493259515291,17309934874322470689,2097152 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,2364257502494138737,9238669701884203154,2097152 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,5700903560573660764,17133469407991804356,2097152 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,7960550737622776718,10894257178265863493,2097152 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3672,i,13485900729397466911,12369775566655119145,2097152 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,7036763857850630535,2549308668412889196,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,10311341695172845130,18068043980952771681,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,18361826791290635758,5649120787308132471,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,18361826791290635758,5649120787308132471,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,1825910702684951746,13277671282048545594,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,13130521518615001598,14108056962523076600,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,10273979528904845000,5682962957542241013,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1028,i,14881902561502057389,11165535842472297013,524288 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6308,i,4455243090249012688,3365880268675459889,262144 --field-trial-handle=2696,i,7241518914902473327,17610682124135732077,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2136

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1332

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 787d9e83c0ac369e1e6e2e5837742635d21e697181d1d7d69c17956b61338af4
MD5 f022af6ead525fbeebda9464e5781260
SHA1 0d5131d2d9738527f6e546aabcb6b05d29e97a2b
SHA512 32a42d2ab0de69a7a1376bbbfd98c3cb048fd6af453ff0c23ba4a7f3e81cb9940e06f60d75d253e6d55ba138fcf9f5c4ddef4b456c16e1d4559f08ff16891cfe
TLSH
T19851AAB07FA883A9D79BFC70B1D1138B36F769B151436EA60654C5BB9B073340128C74
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 56b21202cbaa649ae2ac63132d4f82fc63e62a41ed3930d69d2668824f59b12c
MD5 d25c754314d313e5f173044fc17588df
SHA1 a29cb559301dcdfbce604db434ed5b2dfbccbb4c
SHA512 b1cd7e6ae48d148c4d1bd4e885faf67185b9fb05e6af7ffeac3d40f8f2064f4fdcceb22262167b02921487abc414997659928ec80b95c93a32c45a591624be08
TLSH
T14F31BEB7C7D9866EC50146F05624BE1ACD2D051A42283D1A8DE4EF0F93E2575D102A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 549fb362edd89d47eefc4e50ce1d2fc9e19dd4705e812114335c3d310c31b768
MD5 1697a386a99c4c057a2728fca6c2b81a
SHA1 933bfcc43ccb526303e063c2ed6a189e42c7b915
SHA512 e039f8b9cae2b4b2ff445cca855f0882411e8e6bfd997e626f2ade5a0456afcf0612441e764673bb15f77911b351357b14cbc88e54d82237a4f580c93e50e28e
SSDEEP 192:sxZIRBWD/fksom0IdpdFHW6+WNGYrbayIgrJ:sxZISD/fksomtzHbG+9
TLSH
T1B812C8566E28A97B8CC7D20DBB25BF53D6F9503261D41E48EAFC962C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 127c08a1bf573e08fd0ff8fabf39b2e644c3fc02937708de661213ccaa2e3e09
MD5 ecd02b699440047aa23b487f8c656144
SHA1 0261e6be52f81cbdf223e3f9e0ac4f2706565738
SHA512 d579b66ab4373169cdcfd90d3c1193de0effd0c7c5072191f4029ee0b099534b0242a6c21558ce4e21a7c5a3d9d9950085156503b19954a4e4997258b81b03ee
SSDEEP 192:sxZIRBWD/fksTR0IdpHFHW6+WNGYrzayIg5qJ:sxZISD/fksTRtlHbGM8
TLSH
T13222B8566E28A97B8CC7E20DBB15BF53E6F9503261D01E44EAFC862C05F7ADD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2502fe1b40b0666f242285b81989a413518d8f06211b593e0d24211792fd1c04
MD5 c895fb1912bdbc340c19c2df940031fd
SHA1 422f9d5901e1d3372807b5c7702b5f8ab56b352e
SHA512 7d386fa88866682c8e04b71bf913bddbde0b6e9c6cbc806b0d5ffaa18a5f40a794d838561bf46e1c0859ae5e5895e74e47badc51eb4efd7ccf3aca78e00f2805
SSDEEP 192:sxZIRBWD/fksTR0IdpdFHW6+WNGYrYayIg5qJ:sxZISD/fksTRtzHbGB8
TLSH
T16822C9566E28A97B8CC7E20DBB15BF53E6F9503261D41E44E6FC862C05F7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 9fa1578524c6fdcaf0345bbbf53948bb0a55c9afb181125e347831d4b1ea8238
MD5 a7fc54bc76b5b78c6f83e38b8e3212f8
SHA1 ea71ecdc524b28714d65ba59bb02d0ca969b7e86
SHA512 8e7d6f2541172f3edf54b35643b989887fe61a88e46e143aede048c780c396485baec4d97cf67e61e3c93c58ac756ad414b3c4eec07e5ef7f23102f878cd85a1
SSDEEP 192:sxZIRBWD/fksTm0IdpdFHW6+WNGYrbayIg5IJ:sxZISD/fksTmtzHbG+O
TLSH
T18422B8566E28A97B8CCBD20DBB25BF53D6F9503261D41E44EAFC962C04E7ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2222fa8ff9a363ff279ef51511a1d984dbb9cf16fff1127498a20801d7481356
MD5 ff987d6d2419f6cfe977a08b0210c133
SHA1 35e235c5490440317019a86ef0089df75a0970c3
SHA512 b5b8d70eea7f5629bdb8451a82529964ce3565f773031dcd50dfe6daa9a580079ee1c21e5bf8e7b891be999893e7b19fbaa7a4f842f7b98a9a8dd8d679ab9b53
SSDEEP 768:3cy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbEroRkag:3cy4J/DWvbtBhu1jajiLm0bPaag
TLSH
T153C2FA3F684CCA7E4FC00A9DED5E6F973E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 f1ecdbfe8b739593ac52a58d6b45a2581d294db157897d70db01e4d423080029
MD5 dcf0f7a3cdb5eed8ae0e2ac5faea56c6
SHA1 2728adec0b33f96882ac5daeefb402110355f305
SHA512 4d07eda177241baa6e6640b188efbfab65a0732a3a5e6bfbc27b1b46dfacc8a526fce0eb884612cfd64261527234955910820b3ea8f8333e56e2078067230d84
SSDEEP 48:KIDI1Ks04jyLbef7F99ebtAFISbeK9r1pexzOYo5L/yL98xN/rvQbjWDISFydgMg:KIDCKs0+KsgKtu+i+VNqKGk6iS8KDK/
TLSH
T162D1F64171BB060538BD264C81B5C72F524236737119EA3B7F7D84968E6BE085DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27150671-f2b0-4227-8cf3-31874dbe4cf5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\27150671-f2b0-4227-8cf3-31874dbe4cf5.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3c2a5faf35bfaa8c8174a68c8348ae9d083f795174d8bb716004fa2d5804fb03
MD5 9a38ff91058ef20efee4623183dc4164
SHA1 cd96caede1653e3ead501b96d49b39fec38aa639
SHA512 32c899d2e24eec186be80c168aaec9dc34bcc4fdf9388d6d1b463b1f148ab56b8223d25c737edfd4191f16094503c26cce1aa8e0f26880e4f90cfc3717fac478
SSDEEP 192:1ONb6wlDgQmiUybNW4X58gZXjzorPJjADlFRU6:1ONb6kgaW4X58Ef8PJj0nU6
TLSH
T1DA02F935F9787C6B9EF3AE09B08627139FE5112BE6552F44D6E81B2D00D769C130AD23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2db5937b139ef16b60280ec0027af5d24dc2a5862f2ed7ae11b2e04d08eb07bc
MD5 e02957381d40f2df14438a1423c0ddea
SHA1 c3061172bcf6d3f7afef9ac15621f62551932082
SHA512 f48614604c3bb18e89c1ff110e20b840dcd79b9e61357f196f92065604f761761be206c436ad707256005c4d5ac877c4b46e3f33e40b00ef2eb9d8c05ad847b0
SSDEEP 384:LZcIJsNztiZTwUuHX58Ef8PJjWXi+2mA/7O6R2FeoYh7U1ko0:TJ52paAilb/7TRTmk3
TLSH
T162827D31ACB8AC366DF7E546B44A35039FF9905796C95F90D6EC9F2E00DE6A8130AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 2e3159eed1678b2c1482907326ebad3c302dd10ca21753c45d5bef12339bce02
MD5 39fed991423bd4156331cef619271a24
SHA1 e567a4f9dae793d9ff50444a1d01ccb4babde3cf
SHA512 658a32112865c62dcc765a899968bbe69e4c9774616c650e6f07646e4af566e71c44b170fe90490db43629a38accdbcff0ca2f4e9fb0b11c888e2521f4a4bbe4
SSDEEP 384:xiFiZcIvTsNN8TUNTUlIltiZTwUuHX58Ef8PJjWXi+2mr/7O6R2FeoYh7U1ko0:YFQ7MwgG2paAil0/7TRTmk3
TLSH
T127A25D325CA8DD3BADF79A45F54A31039EF540A7D6C5AB90E3DC5F2E009A5DC130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e170c369958aa8f7c2df09992c4a9c1f063db6ebd2baf3ce761a8cf8a26155d8
MD5 75ed751427dffef6cca8c6f86f68c187
SHA1 9f03d881208080a8264798f70acefd96fc7c8544
SHA512 ba9f80394a57f388a4df2ac6877fc8f8402a042fc18ef5c272c201724cc00a6e9f903a4fdfff6d0872f92a6a173a16b55d5652cc07b37d053826c9029cbe8606
SSDEEP 384:rZcIJsNzIiZfwUuHX58Ef8PJjWXi+2mA/7O6R2FeoYh7U1ko0:zJq2paAilb/7TRTmk3
TLSH
T19A827D31ACB8AC366DF7E545B44A35039FF9905796C96F90D6EC9F2E00DE6A8130AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b145753fa31e7cc34f7d6b5729f12a2e736cfac8231c027465b3ee748b7ed934
MD5 437150c462572b00ddaef56ebf83d85a
SHA1 6605b523169989df0d8a72c807656b4df5dc9dd3
SHA512 32ed87dafe9ab2e890080253c44da418321d4bffae3fa492d473823280648a612dad7cdc0cc6245297e5fe94706638927bbeb7fc5e9b72fbf9f63f6400a3115f
SSDEEP 192:1ONm6wlDEQmiUylN/4X58gZXjzorPJjWXm7R+2mHveL/LU6:1ONm6kUC/4X58Ef8PJjWXi+2mW/U6
TLSH
T1E9120735F868AC2B5DE2A545B08735039FE65117EA896F90D6EC1E2D01EF6AC530EC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8bb25730-7b94-497c-a9ee-c970053dd6e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8bb25730-7b94-497c-a9ee-c970053dd6e3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 642abcb095018340398c0e991b7cd483b4333cdff283a69d1439b91d9cb2fcec
MD5 fa7bdafbe5e8a01abe756b3a69454446
SHA1 fce73d58927ed42c223e336da75fdf5d9de1394f
SHA512 97e14820b54a05b9fa4932559a8d519352e0f6ae8f1b6ff36fc96a3b795e31eb905d373337eb8873f7beb16140990e0d9b9d029d4ee2277358c29ad06227e668
TLSH
T1C2410B58B6ED1108B3B76F569BF7A96D487ABC772E0AD55E01110D4F0663B00CC62737
MD5 SHA1 SHA512 TLSH

Submit Download